The whole system works on trust. You've given them permission to charge you, and they can do that whenever they feel like it. You only have legs if they charge you more than was originally agreed/ have already charged you.

There may well be some sort of legal precedent out there testing this, but I may be wrong.